Re: RemoteAddrValve and RemoteHostValve

2009-03-02 Thread Zak Mc Kracken
Gregor Schneider wrote: you've been asking the valve-stuff because you want to limit the access to requests coming from localhost only? Yep! why then not make tomcat listen on localhost only? configuration for that's a walk in the park... My Tomcat is serving a number of webapps, I want

Re: RemoteAddrValve and RemoteHostValve

2009-03-02 Thread Zak Mc Kracken
Thanks Gregor, that's very interesting for production environments. I'll try it. Cheers. M. Gregor Schneider wrote: On Mon, Mar 2, 2009 at 11:25 AM, Zak Mc Kracken zakmc...@yahoo.it wrote: Gregor Schneider wrote: you've been asking the valve-stuff because you want to limit the access

Re: RemoteAddrValve and RemoteHostValve

2009-03-01 Thread Zak Mc Kracken
Thanks again. André Warnier wrote: It would in my view make a lot more sense to have a single Remote Access Valve to which one could specify, in allow or deny, a hostname AND/OR an IP address expression. Like Valve className=x allow=localhost,www.mydomain.com,192\.168\.1

Re: RemoteAddrValve and RemoteHostValve

2009-03-01 Thread Zak Mc Kracken
Gregor wrote: marc, do i understand you correct that you only whant to accept requests from localhost? I have a Java web application that computes some data from an existing Java-based infrastructure and output it as simple plain text. The output is intended to be consumed by other PHP

Re: RemoteAddrValve and RemoteHostValve

2009-02-28 Thread Zak Mc Kracken
Gregor Schneider wrote: What in the documentation (http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html) is the part you don't understand? Thanks for replying. Maybe it's me, but what I gather from the documentation is that it's not possible to combine the two filters as I want, i.e.:

Re: RemoteAddrValve and RemoteHostValve

2009-02-28 Thread Zak Mc Kracken
Gregor Schneider wrote: What in the documentation (http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html) is the part you don't understand? Thanks for replying. Maybe it's me, but what I gather from the documentation is that it's not possible to combine the two filters as I want, i.e.:

Re: RemoteAddrValve and RemoteHostValve

2009-02-28 Thread Zak Mc Kracken
Thank you all for replies and detailed explanation. Now I understand what's happening. My specific problem is restrict a single web application to clients coming from localhost only. This was not working (everything blocked): Context Valve

RemoteAddrValve and RemoteHostValve

2009-02-27 Thread Zak Mc Kracken
Hi all, I'd like to filter incoming requests with this criterion: if it's www.somewhere.com - OK else if it's 1.2.3.4 - OK else - KO Is it possible to do that by combining RemoteHostValve and RemoteAddrValve? How? I simply tried to write them one after another, but all is blocked, it seems